CVE-2021-35342

7.5 highEPSS 1.1%

High (7.5) in northern.tech useradm. EPSS 1.1% chance of exploitation in the next 30 days.

The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2021-08-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

northern.tech:useradm

References

https://mender.io/blog/cve-2021-35342-useradm-logout-vulnerabililty
https://northern.tech/our-products
https://mender.io/blog/cve-2021-35342-useradm-logout-vulnerabililty
https://northern.tech/our-products

Check your stack JSON